Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Limit nginx dynamic port router in url to used ports #250

Closed
SBriere opened this issue Apr 22, 2024 · 0 comments
Closed

Limit nginx dynamic port router in url to used ports #250

SBriere opened this issue Apr 22, 2024 · 0 comments
Assignees
Labels
bug Something isn't working

Comments

@SBriere
Copy link
Member

SBriere commented Apr 22, 2024

Describe the bug
In the current nginx config, services that use dynamic ports specified in the url are not limited in their range, allowing a potential attacker to reach other internal ports.

Expected behavior
Limit the url specified port to specific required port ranges for each services

@SBriere SBriere added the bug Something isn't working label Apr 22, 2024
@SBriere SBriere self-assigned this Apr 22, 2024
@SBriere SBriere closed this as completed May 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant